Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qigEEHK1GTCyle6jNGZkl8BGC4Q.roa
File:                     qigEEHK1GTCyle6jNGZkl8BGC4Q.roa (raw, json)
Hash identifier:          qaKCXZTU0xyGoV8zoe/FOvi/JT3tYMp52JbyhhOh5Y4=
Subject key identifier:   AA:28:04:10:72:B5:19:30:B2:95:EE:A3:34:66:64:97:C0:46:0B:84
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B22DFF9765756850FDD6151D64B9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qigEEHK1GTCyle6jNGZkl8BGC4Q.roa
Signing time:             Mon 23 Jan 2023 10:50:59 +0000
ROA not before:           Mon 23 Jan 2023 10:50:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211704
IP address blocks:        2a0e:97c0:230::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b2:2d:ff:97:65:75:68:50:fd:d6:15:1d:64:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa28041072b51930b295eea334666497c0460b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:90:ce:64:97:b1:10:95:bc:5e:03:ed:01:
                    5b:ad:c0:28:0c:1d:20:dc:97:d9:4a:6b:89:8a:da:
                    7a:d3:19:df:9a:3b:07:ae:7c:a1:b9:32:83:3a:2b:
                    30:8b:5b:b9:31:c5:24:f1:a0:54:b5:4a:48:83:9d:
                    54:6a:d9:86:97:6f:1e:da:ba:39:8a:b5:8e:16:81:
                    15:6d:48:8e:97:c5:0a:f1:be:09:ed:41:8a:e8:46:
                    d9:3a:1a:87:d4:53:6b:a3:41:ed:e4:c7:5a:bc:92:
                    2d:80:e1:bc:f7:93:50:79:c7:fc:6f:f2:b6:66:4a:
                    9e:94:66:e9:a8:2b:0f:ef:71:80:b8:4c:df:0a:a2:
                    97:6f:20:02:05:8d:b5:67:45:6c:ed:dc:2b:89:db:
                    10:bb:19:d9:47:99:0f:9c:b5:36:62:73:c5:82:49:
                    60:32:d5:53:4a:4b:ae:ef:75:22:af:42:a3:af:11:
                    5a:5d:21:14:35:f4:98:fd:e1:73:2a:a2:2e:27:c9:
                    d5:bd:1c:7b:d9:0f:f2:b6:ff:c3:5e:3d:ee:0e:36:
                    f4:5b:3a:f0:92:aa:19:ae:db:fe:73:7e:fd:ab:d6:
                    58:07:81:7d:90:6c:1c:09:e4:31:c9:dc:f4:a8:03:
                    e1:7d:1c:2a:01:0e:46:6d:01:c1:4e:88:64:58:b9:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:04:10:72:B5:19:30:B2:95:EE:A3:34:66:64:97:C0:46:0B:84
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qigEEHK1GTCyle6jNGZkl8BGC4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:230::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:36:55:b7:c9:d2:fb:67:46:3e:0c:5c:1a:bc:4a:d6:86:a6:
         15:29:4a:ef:8e:05:f0:2b:fc:80:dc:71:33:3d:f5:dc:28:58:
         d2:98:cf:d2:40:15:f0:97:c7:4a:01:e6:86:83:e5:2c:48:c6:
         74:e1:f3:1f:06:a8:24:19:3f:96:8f:fe:db:ab:19:c4:3e:a9:
         89:92:4c:49:1c:af:81:28:8e:f8:ee:be:b9:ef:2d:dd:87:47:
         f4:d7:6b:23:11:94:46:e0:6f:a5:c8:65:91:5f:e9:6a:ee:70:
         ed:51:20:23:34:0f:b4:e3:c5:c7:3d:f6:8b:df:93:c9:7b:51:
         5d:36:c2:a2:d9:9c:69:88:81:8c:76:3a:1f:eb:57:c9:fe:5f:
         d9:66:2a:a7:f3:b1:96:29:91:58:45:11:ad:96:d4:07:57:bc:
         ef:39:7c:74:c0:59:8c:02:6b:f6:34:49:bd:55:77:ba:f4:0d:
         25:92:23:1a:2d:18:dc:f9:1a:90:2f:b2:9c:bf:bd:64:b5:05:
         c9:79:85:fb:7e:97:f0:07:05:08:b8:a7:a9:3b:9a:f2:9c:4a:
         48:2f:c0:b5:59:d3:42:c3:ca:b7:cd:26:4c:c2:58:5a:5b:60:
         b0:bc:25:0a:23:86:0a:cb:fa:b5:e7:05:33:b4:e9:b6:49:48:
         85:19:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----